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AMENDMENTS TO THE SPECIFICATION 

From the original specification as filed, please replace the paragraphs beginning on page 3, line 

20 to page 4, line 7 with th e following paragraphs: . 

\ ln a cc ordant o with th" thoro in provided a avotom for ciphering -d ata otorod within - a 

memory buffer oomprioing: 

ail lntDg b tod pi ocr nn n r — "™p ^ thn memory buffor. for ciphering tho data, and 
for porformW operations rotating to vorifioation of data integrity, the oiphoring and th e 
performed operations ex e cuted in parall e l, tho procoonor for providing prooossed dntv 
fa aooordanoo withtho invention ther e is aloo provid e d a syptom for ciphering data comprisi n g- 
a memory' buffor having a firat port and a second port; 
a plurality of communication p otts? 

a - firat proc e ssor in communication with tho first port of th e momory buffe f and tho plurality of 
communication porto; 

a oooond processor in cornmumoaWi with tho oooond port of tho momory buffor, tho oocond 
piocogQor for oiphoring data within th\momory buff e r and for storing tho data ciphered data 
within tho momory buffer, 

whoroin data oiphoring operations do not affect oporationo of th o first processor ^] 

Tn a first aspect a system for ciphering a packet in a data stream received by_a 
communication device is provided. Th e system includes a memory device having a memory: 
buffer, a first access port connected to the memory buffer and a second access port connected to 
the memory buffer. The system includes a first communication port for receiving the data stream 
and a second communication port for transmitting a ciphered da ta stream associated with the data 
stream. The system also has a data processing processor conn ected to the rnmrmini ration ports 
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\nH the first v**** n »rt via a first bus and a cip hering proc essor connected to the second access 
pott via a second hus. The first access port an d the second access port each provide access to th e 
■ buffer. The data processing processor is adapted to receive the data stream a nd provide 
it to the\emorv buffer over the first bus, to i d entify a start and an end of the packet, to stor e a 

..-nriateM with the packet in the memor y differ through the first bus and to retrieve the 
ciphered data < X«r. from the memory buffer th rough the first bus for transmission through the 
second communication POrt . Th e ciphering processor is adapted to retrieve the file from the 
™«innrv buffer over tne second bus, gen e rate the ciphered data stream from the file, generate 
integrit y check informatiar. far the ciphere d data stream using the file and provide the ciphered 
data stream to the memory buffer ove r the second bus. 

The cipherinp processorVav include an encryptio n module for generating the ciphered 
data and a module for generating tMe integrity check information. The module may be a hashing 
module. 

The encryption module mav include a PES encrypt ion module for oerfonning one of 
PES and triple-DES encryption. 

The module m a y include a HMAC hashing module for encoding the integrity check 
information within the ciphered data. 

The memory buffer mav include dual port rand om access memory. 

The data processing processor mav include a security module. The security module may 
retrieve a security context from memory. The security conte nt mav be used in generating the 
ciphered data stream. 
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tV cpmirit v module may determine a s ecurity context relating a source of the data ora 
deatination\br the ciphered data stream and m a y store the security context in the memory buffer. 
The security context stored may be acc essible by the ciphering processor. 

The data pWessing processor mav include a se curity address module. The security 
address module mav\store an address associated with t h e security context in the memory buffer. 
The address mav be based on the source of the data 0 * destination for the ciphered data. 

The security module mav provide an indication to the d ata processing processor when a 
security context is not presentMn the memo ry buffer. 

The data processing processor mav operate asynchro nously to the ciphering processor. 

The data processing orocessoXmav be clocked bv a f irst clock source and the ciphering 
processor mav be clocked hv a second clock source. The first cloc k source mav be asynchronous 
to the second clock source. 

The data received at the first communications port mav in clude fragments of a packet. 
The data processing processor mav store the fraWents in th e memory buffer to assemble the 
packet. The ciphering processor mav generate the, ciphered da ta stream from the assembled 
packet. 

The system mav be disposed at a gateway between a private netw ork and a public 
network in a secure virtual private network. The first coW iunications port mav be connected to 
the private network or the public network and the second communicatio ns port mav be connected 
to the other one of the private network and the public networ 
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V » M paet a metho d for ciphering a packet in a data stream received by . a 
communion d^e is provided. The device has a first communication port for receiving the 
H*t» stream^ecP tid communicatio n P nrt for transmitting a ciphered data stream associated with 
the data streamXmemorv devic e, a data processing processor connected to the first and second 
r.nmmunication nnrtW the access port via a fir st bus and a ciphering; processor connected to 
the second acce ss porWra a second bus. The m emory device includes a memory buffer anda 
first and a secon d access ports connected to the memory buffer, The method comprises receiving 
the data stream from the first communicatio n port for processing bv the data processing 
processor: identifying a start and ak end of the p acket bv the data processing processor; storing 
file associated with the packet in the memory buffer bv the data processing proc essor through the 
first bus: retrieving the file from the membrv buffer bv the ciphering processor over the second 
bus: generating the ciphered data stream from the file bv the ciphering processor; generating 
integrity check information for the ciphered data stream using contents of the file by the 
ciphering processor: and providing the ciphered data st ream to the second communication port. 

The method mav further retrieve a security coritext from memory for use in generating 
the ciphered data stream: determine a security contex t relating to at least one of a source of the 
data stream and a destination for the ciphered data str e am: W store the security context in the 
memory buffer, the security context stored being accessible by the ciphering processor. 
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